aa_set_current_hat(9)

💖 NAME 💖

Okay so welcome to aa_set_current_hat(9), straight from the Kernel API Manual — and the name is literally aa_set_current_hat, aka set the current tasks hat. Slay, we love a clear title 💅

---

✨ SYNOPSIS ✨

int aa_set_current_hat (struct aa_label *label , u64 token );

---

🎀 ARGUMENTS 🎀

• label — the label to set as the current hat, and bestie it is NOT NULL. No cap, it has to be there 🫶
• token — the token value that must be specified to change from the hat. That’s the little key situation 🔑

---

🌸 DESCRIPTION 🌸

It does the switch of the task’s hat. Periodt.

If the task is currently in a hat, it validates the token to match. So yeah, the token has to line up — vibe check passed or it’s not moving 💀

---

🔥 RETURN 🔥

Returns 0 or error on failure. That’s the whole mood: success gets a 0, failure gets an error 🌈

---

🦋 SEE ALSO 🦋

Kernel file ./security/apparmor/task.c — go peek at the source, iykyk 👀

• aa_get_task_label(9)
• aa_replace_current_label(9)
• aa_set_current_onexec(9)
• aa_restore_previous_label(9)
• audit_ptrace_mask(9)
• aa_may_ptrace(9)

---

Later bestie 🫶 — this page’s source/version is ./security/apparmor, and the date on it is October 2026. aa_set_current_hat(9) out 💅✨